CVE-2026-71270

Summary

The flaw allows an attacker to exploit a SSRF vulnerability in Stirling-PDF's API, potentially leading to unauthorized access to internal resources.

Exploitability

Exploitation requires control over the URL parameter in the POST /api/v1/convert/url/pdf endpoint, making it moderately hard to exploit.

Blast radius

If exploited, the impact could be significant, as it could lead to unauthorized access to internal resources from the perspective of the application.

Detection

No reliable host or network indicator is derivable from the published description.

Prioritized remediation

Upgrade to the fixed version 2.590 or later.

Analysis generated locally by qwen2.5:7b-instruct (no data left the box). AI-assisted — verify against primary sources before acting.